The system must not permit root logins using remote access programs, such as SSH.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-1047 | GEN001120 | SV-1047r2_rule | ECPA-1 | Medium |
| Description |
|---|
| Even though communications are encrypted, an additional layer of security may be gained by extending the policy of not logging directly on as root. In addition, logging in with a user-specific account preserves the audit trail. |
| STIG | Date |
|---|---|
| VMware ESX 3 Server | 2016-05-13 |
Details
| Check Text ( C-892r2_chk ) |
|---|
| Determine if the SSH daemon is configured to permit root logins. Procedure: # find / -name sshd_config -print # grep -v "^#" If the PermitRootLogin entry is not found or is not set to no, this is a finding. |
| Fix Text (F-24426r1_fix) |
|---|
| Edit the configuration file and set the PermitRootLogin option to no. |